| name | microsoft--mxc |
| description | Microsoft eXecution Container — sandboxed execution cho untrusted code (model output, plugins, tools). Policy-driven, cross-platform (Win/Linux/macOS), TypeScript SDK, Rust binary. |
| allowed-tools | Bash, Read, Write |
| user-invocable | true |
MXC (Microsoft eXecution Container): chạy code không tin tưởng — model output, plugins, tools — trong sandbox có policy granular. Cross-platform, multiple isolation backends.
Install
npm install @microsoft/mxc-sdk
Usage (TypeScript SDK)
import { MXCClient } from '@microsoft/mxc-sdk'
const client = new MXCClient()
const result = await client.exec({
command: ['python', 'untrusted_script.py'],
filesystem: {
readOnly: ['/data/input'],
readWrite: ['/tmp/output']
},
network: {
outbound: false
},
timeout: 30000
})
JSON Config Schema (v0.6.0-alpha)
{
"version": "0.6.0-alpha",
"command": ["node", "agent_generated_code.js"],
"filesystem": {
"readOnly": ["./context"],
"readWrite": ["./output"]
},
"network": {
"proxy": null,
"outbound": false
},
"timeout": 30
}
Isolation Backends
| Backend | Platform | Strength |
|---|
| ProcessContainer | Windows (default) | lightweight |
| Bubblewrap | Linux (default) | namespace isolation |
| Seatbelt | macOS (default) | sandbox profiles |
| Windows Sandbox | Windows | full VM-lite |
| LXC | Linux | container |
| MicroVM (NanVix) | Linux | full VM |
| Hyperlight | Cross | micro-VM |
Sandbox Lifecycle
provision → start → exec → stop → deprovision
Hỗ trợ long-running sessions, không chỉ one-shot.
Dùng khi nào
- Chạy model-generated code an toàn
- Sandbox plugin/tool calls của agent
- CI/CD: test untrusted PR code
- Security research: execute malware sample
Caveat
"No MXC profiles should be treated as security boundaries currently"
Đang alpha — dùng cho dev/research, không dùng làm hard security boundary.
Source
https://github.com/microsoft/mxc · MIT · +64⭐ today
